CVE-2023-34364

A buffer overflow was discovered in Progress DataDirect Connect for ODBC before 08.02.2770 for Oracle. An overly large value for certain options of a connection string may overrun the buffer allocated to process the string value. This allows an attacker to execute code of their choice on an...

CVE-2023-34364

Progress DataDirect Connect for ODBC (Oracle) prior to 08.02.2770 contains a buffer overflow caused by overly large option values in a connection string, overrunning the processing buffer and enabling remote code execution. The root cause is improper bounds checking on certain connection-string o...